Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: YyT4NdHEGaCQ2WADBFzSqF6IDTV4QxSI2T5iVKe3ngg=
Subject key identifier: 40:6C:82:F7:D2:52:93:9A:8D:A7:E4:C9:B5:E2:32:46:FE:40:3E:CF
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 0199FAD7C6167289CFFCEF75F03DC1D7B965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 1422
Signing time: Sun 19 Oct 2025 05:01:08 +0000
Manifest this update: Sun 19 Oct 2025 05:01:08 +0000
Manifest next update: Mon 20 Oct 2025 05:01:08 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: hMOBpliY07asiqIJMz7ZXY03YN55WbVU+LqNCTAuA8I=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c6:16:72:89:cf:fc:ef:75:f0:3d:c1:d7:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Oct 19 05:01:08 2025 GMT
Not After : Oct 20 05:01:08 2025 GMT
Subject: CN=406c82f7d252939a8da7e4c9b5e23246fe403ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:5d:bd:c7:a3:62:ba:93:e6:16:5f:87:70:
51:cd:2c:51:83:2c:7d:1b:76:13:a9:d2:cd:73:a1:
ec:35:00:15:f1:5e:f2:e9:e0:f3:cd:26:d0:1d:03:
11:2e:b6:45:0e:35:2e:fd:90:38:3e:d8:ce:17:97:
2e:3c:84:86:64:bd:e0:df:df:0c:f2:50:01:cd:cb:
24:6b:27:75:b1:1d:a2:b5:ae:5f:ed:18:be:f6:10:
0d:d1:f8:7c:79:3e:3e:2b:ed:f8:74:a2:ab:81:9c:
59:8b:34:21:b3:c7:44:87:c6:0c:0f:a2:a9:e3:5a:
93:a4:05:e1:ee:75:ff:7d:c9:7f:29:f6:9a:cc:97:
61:da:8d:17:ab:97:6c:69:24:9a:58:6a:b1:a0:3e:
c0:b9:47:2e:e8:45:b9:39:e2:32:9c:d9:ae:b9:96:
75:2e:f2:6b:bb:c1:69:d5:78:9b:d6:a5:be:cb:63:
39:c2:30:10:22:f8:3b:5e:b3:1d:f1:c5:a0:b1:b1:
84:5d:24:ba:47:50:75:d4:f7:e2:36:bd:bc:f1:ae:
e8:eb:4b:67:78:51:0a:76:a5:b5:61:d0:8c:22:76:
87:13:80:fb:17:9d:9a:48:0e:d7:63:07:df:ca:82:
21:e5:ec:95:24:af:8c:58:47:9c:94:1f:2f:7f:9c:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6C:82:F7:D2:52:93:9A:8D:A7:E4:C9:B5:E2:32:46:FE:40:3E:CF
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d0:2a:13:c5:99:08:67:a3:7a:1d:43:4b:ea:84:42:d9:41:
ff:d8:86:dc:a0:b0:39:24:df:25:8d:c4:0c:cf:fa:95:97:3a:
82:96:5e:7c:5f:04:bd:70:ca:7f:d3:4f:64:87:7e:57:80:c5:
20:cb:d5:d0:df:c5:27:2a:7f:1f:e1:b5:1f:02:b5:7d:79:ee:
39:90:e2:09:6c:85:77:aa:9f:33:7d:ae:b6:71:2f:d1:a8:73:
c9:40:a2:4b:f1:64:b1:88:c6:0d:6b:94:23:3a:a0:f7:e2:d8:
45:12:81:32:e8:8c:5f:a1:df:c6:38:6c:33:68:fe:36:bc:db:
b5:44:92:82:31:e1:4f:4f:90:79:25:10:1b:b4:25:e9:bf:8d:
e6:4b:ea:a3:00:42:98:ae:7d:4d:35:52:24:8d:02:50:5a:29:
3c:15:ee:f6:6d:cb:2d:3a:d7:54:b8:2d:9c:3f:91:87:1b:a8:
ac:6a:1f:e8:15:11:50:cf:ff:73:60:3d:25:e9:03:5c:50:aa:
d6:2a:88:81:92:0c:72:4c:55:d5:9d:7f:02:44:86:7b:50:2d:
9d:d5:ca:d4:9e:fb:b6:1a:29:59:d4:fe:d5:7f:a1:89:db:77:
00:1d:c4:c1:3d:8c:80:68:e8:48:94:89:ae:eb:7d:31:6e:62:
12:23:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:22 2025 by rpki-client